Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-71491

Опубликовано: 17 авг. 2026
Источник: nvd
EPSS Низкий

Описание

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX_GROUPING_TOKENS guard, causing quadratic CPU consumption through sqlparse.parse() and sqlparse.format(sql, strip_comments=True). This issue is fixed in version 0.6.0.

EPSS

Процентиль: 18%
0.00263
Низкий

Дефекты

CWE-400

Связанные уязвимости

ubuntu
14 дней назад

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX_GROUPING_TOKENS guard, causing quadratic CPU consumption through sqlparse.parse() and sqlparse.format(sql, strip_comments=True). This issue is fixed in version 0.6.0.

debian
14 дней назад

sqlparse is a non-validating SQL parser module for Python. Prior to 0. ...

github
14 дней назад

sqlparse: Quadratic O(n²) DoS in group_comments

suse-cvrf
7 дней назад

Security update for python-sqlparse

EPSS

Процентиль: 18%
0.00263
Низкий

Дефекты

CWE-400